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ABSTRACT 

Allocation of bandwidth to a link which is remotely displaced from a server is 
described. The link need not directly connected to the server. The server includes a process 
to assign a portion of the bandwidth to at least one application group; and count packets 
belonging to the application group that pass through the server. The server can be a VPN 
server that authenticates packets. Each application group includes packets that share a pre- 
defined configuration. Accordingly, the server combines bandwidth management and packet 
authentication with little overhead. 
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